updatemanager fails to upgrade unathenticated packages

Bug #706067 reported by enb
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
update-manager (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

When attempting to upgrade packages that do not have an authentication key, update manager doesn't allow user to override the package is not authenticated error

Revision history for this message
enb (elitenoobboy) wrote :

This is a security issue because it can prevent the user from upgrading updated/more secure packages.

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

This is by design. Packages that do not possess a valid signature are inherently insecure.

affects: ubuntu → update-manager (Ubuntu)
visibility: private → public
security vulnerability: yes → no
Revision history for this message
RedSingularity (redsingularity) wrote :

Duplicate of bug 707392. Marking.

Changed in update-manager (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.